train-sentence-transformers

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Remote Resource Retrieval: The skill includes instructions to download a command-line interface from an official domain (hf.co) and several Python packages from public registries. These are standard components for establishing the necessary environment for model training.
  • Data Processing Surface: The training workflow involves ingesting text data from external sources to optimize models.
  • Ingestion points: Text content from datasets like MS MARCO or GooAQ is loaded into the agent's context during the training process in files like scripts/train_cross_encoder_example.py.
  • Boundary markers: The instructions do not define explicit delimiters to separate dataset content from training logic.
  • Capability inventory: The skill includes the ability to write model weights to the local disk and perform network operations to upload checkpoints to external repositories.
  • Sanitization: External text data is processed directly for model training purposes without specialized filtering for instructions.
  • Secure Credential Management: The skill provides a framework for using environment-level secrets to handle authentication tokens for remote jobs, as seen in references/hf_jobs_execution.md, ensuring that credentials are not hardcoded within scripts.
  • Model Distribution: The included scripts provide automated routines for uploading training results to external repositories, which is a common functional requirement for sharing and deploying machine learning models.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:30 PM
Security Audit — agent-trust-hub — train-sentence-transformers